neonprimetime security , just trying to help

I think some Snort rules like these could be used to monitor specific user-agents that sometimes are common with recon, vulnerability scans,...

This looks like SQL injection attempt of some sort on mysql, saw it this weekend. GET /index.php/module/aciton/param1/$%7B@print_r(md5(112...